On Tue, Nov 28, 2017 at 11:31:18AM +0100, Rene Engelhard wrote: > > built time, you can either use aa-complain or manually patch the > > That's what I didn't want. Didn't want to stick manual aa-* calls into > the postinst
Ah, I see what you mean. NAME aa-complain - set an AppArmor security profile to complain mode. SYNOPSIS aa-complain <executable> [<executable> ...] [-d /path/to/profiles] OPTIONS -d --dir /path/to/profiles Specifies where to look for the AppArmor security profile set. Defaults to /etc/apparmor.d. so aa-complain soffice.bin -d $(PKGDIR)-common/etc/apparmor.d/ etc? (Maybe with full path?) > > Otherwise, if the AppArmor profile lives in the debian/ directory, One could also just patch it :-) Regards,